Lucene search

K
cveMitreCVE-2007-3729
HistoryJul 12, 2007 - 5:30 p.m.

CVE-2007-3729

2007-07-1217:30:00
mitre
web.nvd.nist.gov
25
cve-2007-3729
hp openvms
tcp/ip services
remote attack
username enumeration
security vulnerability

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0.011

Percentile

84.1%

The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid POP usernames.

Affected configurations

Nvd
Node
hpopenvmsMatch8.3
VendorProductVersionCPE
hpopenvms8.3cpe:2.3:o:hp:openvms:8.3:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0.011

Percentile

84.1%

Related for CVE-2007-3729